MAL-2025-189511 Malicious code in singularity-rigel-quasarjet-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bf17252b6c653ae675c4bf9480413b571a70ae7390302d63383fdc0b937794f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186549 Malicious code in deneb-multiverse-augmentedreality-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c3bb282553929ded53f031976182f596ae80de4f0259afe9086d8c43ffaa49e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187867 Malicious code in loop-wasat-chai-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9f1344329b9f15bef4ddabb5681a861f5b2482d9ea2b08719b507819b36de7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185528 Malicious code in archaeogenetics-tardigrade-filament-boson (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9224028552e3b7dfa507b6d9c04414e4fc7c9633163fa4ca6c51bf465fb5ef0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189470 Malicious code in shell-integer-optimize-log-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45f7c1a43e5ae21f36403f8a689d673dbee083c6f11ecc57ca2355613d69ecbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185898 Malicious code in borealis-rigel-string-exoplanetology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35f2dbdab2e1ba4e40caa517bb65a8334df15b1ced872d929a3e379178347ad6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185696 Malicious code in await-lacerta-ganymede-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3768dcf0227735127c0afebbc782199e7566c7e0b7bd1a357fc0512632645940 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189619 Malicious code in speleology-ganymede-halley-panspermia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09a4e204a906cdfd8a5558d263c05149b2236580f35ac76afc37f33536655421 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189770 Malicious code in supernova-webdriver-mocha-centauri-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2f0154b6bd89e8afefb374086dc7216cbbabd0a804186d702613d53503d4fdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188287 Malicious code in nightwatch-javascript-kastra-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1502cb2d438c26158c0aa98f86013e06d8d4438e066e035cc159953501e1719 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lki-hajisubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80f6fd6fc4eb302d7e529b07110d6c04e214214ad257841475d6173bd7d9dfcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-digoksla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9523178dde35ebeaeaa5aaa7ee9e0adb1d8c89b76d8f0e7564d69b4800c0bb40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unise-kit-bogi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c64805fe2b37966b2797bfdde96f85332ed5ccc73aaeb1589e2d993ce821852 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-uinga-uugfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9223d80a741f496e4880dd3344fb52015a457bc3498603fd848a58203a89dfd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kat-iadavgh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fed76a048ecac2c7dac9ac967f148200b305bb5a2bfaf2029f9baf46afb3e7cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flight-iltag-ziumaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1a5ed9d8ad313174e9fc3e6bcb71c08f1dbd37cdb30b2aa86738f3d842d342a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-fngduyge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49ae4ee65de2da1a72f4a9ecae4393c1589abc667c295e355c67940d3242da6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fuis-fakiuas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27ddbc6871076376fa648ab7b82bb39b7c7c7d063468df571a5bfae16785f7d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-gnuygujkujri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d327e7c9653f6c9219cc7e9b6f7025612a50027477e0769be0df43d934295f0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olium-noliu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4b4f3b9e3ceee00446b5c107c09d95da19afd580ecfd4e464e956f7e44ceb19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...